diff options
| author |   deraadt <deraadt@openbsd.org> | 2017-04-17 21:49:01 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2017-04-17 21:49:01 +0000 |
| commit | 72547754b766351e4b6ebcc51b842f0ddc2fd220 (patch) | |
| tree | 38d9cfe2cb4540192b3e021ec68258f16112edea | |
| parent | freezero() can be used here (diff) | |
| download | wireguard-openbsd-72547754b766351e4b6ebcc51b842f0ddc2fd220.tar.xz wireguard-openbsd-72547754b766351e4b6ebcc51b842f0ddc2fd220.zip | |
memset() of password field should be explicit_bzero().
[Not using freezero() in yacc files yet]
| -rw-r--r-- | libexec/ftpd/ftpcmd.y | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libexec/ftpd/ftpcmd.y b/libexec/ftpd/ftpcmd.y index b8bce1930b4..36d9824a9ce 100644 --- a/libexec/ftpd/ftpcmd.y +++ b/libexec/ftpd/ftpcmd.y @@ -1,4 +1,4 @@ -/* $OpenBSD: ftpcmd.y,v 1.64 2016/08/26 06:32:10 tedu Exp $ */ +/* $OpenBSD: ftpcmd.y,v 1.65 2017/04/17 21:49:01 deraadt Exp $ */ /* $NetBSD: ftpcmd.y,v 1.7 1996/04/08 19:03:11 jtc Exp $ */ /* @@ -157,7 +157,7 @@ cmd | PASS SP password CRLF { quit = monitor_pass($3); - memset($3, 0, strlen($3)); + explicit_bzero($3, strlen($3)); free($3); /* Terminate unprivileged pre-auth slave */ |